Security Advisory

CVE-2019-1000004

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-02-04 21:00:00
Last updated 2024-08-05 03:00:19
Assigner mitre
State PUBLISHED

Description

yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting (XSS) vulnerability in sidebar and table data that can result in Database fields arent properly sanitized and allow code injection (Cross-Site Scripting). This attack appears to be exploitable via the payload needs to be stored in the database and the victim must see the db value in question.